openssl-ibmca-2.4.1-150600.6.6.2<>,Xhg#/-p9|x.fA uCA+"1s`f eP}l]E R* 3V3rzǀKXPg0QȺ(FqлPZ7(X7L/&{_l? q0g޿8p4i"T8t+4(HO4~1o4yLyiD r ^G),3>BF?Fd # D *5 KZd     '  8 t   4 p   ]( 8 &94&:O&>?P@?XF?`G?tH?I?X?Y@\@,]@h^Al bBNcBdCeCfClCuCvCwExEyEzFTFdFhFnFCopenssl-ibmca2.4.1150600.6.6.2The IBMCA OpenSSL dynamic engineThis package contains a shared object OpenSSL dynamic engine which interfaces to libica, a library enabling the IBM s390/x CPACF crypto instructions.g#/-s390zl33qoSUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Hardware/Otherhttps://github.com/opencryptoki/openssl-ibmcalinuxs390x#Original fix for bsc#942839 was to update on first install #For bsc#966139 update if openssl_def not found mkdir -p /etc/ssl/engines3.d mkdir -p /etc/ssl/engdef3.d cp -p /usr/share/openssl-ibmca/openssl-ibmca.sectiondef.txt /etc/ssl/engines3.d/openssl-ibmca.cnf cp -p /usr/share/openssl-ibmca/openssl-ibmca.enginedef.cnf /etc/ssl/engdef3.d/openssl-ibmca.cnf if [ -f "/usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig" ]; then cp -p /usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig /usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig.orig sed -e 's/ossl-modules/engines-3/' /usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig.orig > /usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig rm /usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig.orig fiif [ $1 -eq 0 ]; then # last uninstall rm -f /etc/ssl/engines3.d/openssl-ibmca.cnf rm -f /etc/ssl/engdef3.d/openssl-ibmca.cnf fi\ )$ A큤큤A큤A큤g#/-g#/-g#/-e ;e ;g#/)e ;g#/,g#/-e ;g#/,g#/,g#/,g#/,b2'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-ibmca-2.4.1-150600.6.6.2.src.rpmopenssl-ibmcaopenssl-ibmca(s390-64)@@@@@@@@@@@@@@@@     /bin/sh/bin/shld64.so.1()(64bit)ld64.so.1(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.30)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)libica-cex.so.4()(64bit)libica-cex.so.4(LIBICA_3.0.0)(64bit)libica-cex.so.4(LIBICA_3.0.0_FIPS)(64bit)libica-cex.so.4(LIBICA_3.3.0)(64bit)libica-cex.so.4(LIBICA_4.0.2)(64bit)libica4libopenssl3rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)4.0.03.0.4-14.6.0-14.0-15.2-14.14.3g @f@fff-f@e,e)1@edkY@dP@dGdFo@d?d.@dac< @b0aD@_a@]w@]fl]@[1[_[@[-Y@Y@X@Ww@W@V@V@V/g@V/g@T9T~@nikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commeissner@suse.commpluskal@suse.commpost@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comp.drouand@gmail.commeissner@suse.com- Applied patches (jsc#PED-10292) * openssl-ibmca-01-engine-Enable-external-AES-GCM-IV-when-libica-is-in-FIPS-mode.patch * openssl-ibmca-02-test-provider-Do-not-link-against-libica-use-dlopen-instead.patch * openssl-ibmca-03-test-provider-Explicitly-initialize-OpenSSL-after-setting-env-vars.patch * openssl-ibmca-04-engine-Fix-compile-error.patch- Amended the .spec file (bsc#1227537) * 'rpm.install.excludedocs = yes' in zypp.conf excludes the /usr/share/doc/.. * Added a check, if there is is /usr/share/doc file to be editted. * Replaced hard-coded '/usr/share' with %{_datadir}- Amended the .spec file - Changed the package names +-------------+---------------------------------+--------------------------+ | Flavor | Package name | Note | +-------------+---------------------------------+--------------------------+ | '' | openssl-ibmca | Both engine and provider | | openssl1_1 | openssl1_1-ibmca | openssl1 flavor | | engine | openssl-ibmca-engine | Only engine | | provider | openssl-ibmca-provider | Only provider | +-------------+---------------------------------+--------------------------+- Applied a patch for openssl1_1 (bsc#1221627) * openssl1-rename-libica-files.patch- Re-implemented flavors (openssl3, engine, provider) (bsc#1221627) +------------+---------------------------------+--------------------------+ | Flavor | Package name | Note | +------------+---------------------------------+--------------------------+ | '' | openssl-ibmca | openssl1 flavor | | engine | openssl3-ibmca-engine | Only engine | | provider | openssl3-ibmca-provider | Only provider | | openssl3 | openssl3-ibmca | Both engine and provider | +------------+---------------------------------+--------------------------+ - Changing/editing 'dynamic_path' after the installation on the target system * From /usr/lib64/ossl-modules to /usr/lib64/engines-3 in /usr/share/doc/packages/openssl3-ibmca/ibmca-engine-opensslconfig for openssl3 flavor- Amended the .spec file (bsc#1221627) * Removed the flavors * Removed 'muiltibuild' environment * Removed the 'provider' logic- Updated the .spec file (bsc#1218933, bsc#1221627) * Amended the .spec file to use modulesdir variable - Implemented _multibuild environment (openssl1, engine, provider) - Added a flag and logic for provider in the .spec file * When provider is set to 1, it 'configures' the provider * When provider is set to 0, it 'configures' the engine- Removed an obsolete patch (implemented in the version 2.4.1) * openssl-ibmca-engine-noregister.patch- Upgrade to version 2.4.1 (jsc#PED-5422) * Provider: Change the default log directory to /tmp * Bug fixes- Updated the .spec file, amended to use libica4 instead of libica * Requires: libica4 >= 4- Updated the .spec file * uses a flag openssl3 (1 or 0) to include or not the openssl3 libraries- Updated the .spec file as follow: * BuildRequires: libica-devel >= 4.0.0 * BuildRequires: libica-tools >= 4.0.0- Added dependency on libica4 (bsc#1209038) * BuildRequires and Requires statements in .spec file for libica4- Applies a patch (bsc#1210359) * openssl-ibmca-engine-noregister.patch - Updated the '#dynamic_path' line, as it was before, with the comment '#'.- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210059) * openssl-ibmca 2.4.0 - Provider: Adjustments for OpenSSL versions 3.1 and 3.2 - Provider: Support RSA blinding - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding - Provider: Adjustments in OpenSSL config generator and example configs - Engine: EC: Cache ICA key in EC_KEY object (performance improvement) - Engine: Enable RSA blinding- Updated .spec file removed '#' from the line containing 'sed -e 's/^dynamic_path/#dynamic_path/' (bsc#1209038) - Added in %files * /usr/lib64/engines-3/ibmca-provider.la * /usr/lib64/engines-3/ibmca-provider.so- Upgraded to version 2.3.1 (jsc#PED-597) * openssl-ibmca 2.3.1 - Adjustments for libica 4.1.0 * openssl-ibmca 2.3.0 - First version including the provider - Fix for engine build without OpenSSL 3.0 sources * openssl-ibmca 2.2.3 - Fix PKEY segfault with OpenSSL 3.0 * openssl-ibmca 2.2.2 - Fix tests with OpenSSL 3.0 - Build against libica 4.0 - Removed a Requires for libica from the specfile. - Removed the obsolete baselibs.conf file- Completely revamped the postinstall scriptlet so that it doesn't need to know or care about how many lines are in either /etc/ssl/openssl.cnf, or the sample file at /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample We're now using the ".include" directive for the openssl.cnf file, and only modifying that file the minimum necessary to implement the change. (bsc#1004463)- Upgraded to version 2.2.1 (jsc#SLE-18333) * openssl-ibmca 2.2.1 Bug fixes * openssl-ibmca 2.2.0 Implement fallbacks based on OpenSSL Disable software fallbacks from libica Allow to specify default library (libica vs. libica-cex) to use Provide "libica" engine ctrl to switch library at load time Update README.md Remove libica link dependency Generate sample configuration files from system configuration Restructure registration global data * openssl-ibmca 2.1.3 Bug fix * openssl-ibmca 2.1.2 Bug fixes - Modified spec file to * Define a global variable enginesdir the same was as IBM does instead of _ENGINE_DIR as we had been doing. * Implemented %make_build macro according to spec-cleaner * Changed the package description to match IBM's. * Removed the redundant "autoreconf --force --install"- Upgrade to version 2.1.1 (jsc#SLE-13709) * Bug fixes- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882) Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424) * openssl-ibmca 2.0.3 Add MSA9 CPACF support for ECDSA sign/verify - Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch - Changed the ExclusiveArch directive to include s390x only. - The code in e_ibmca.c does a dlopen for libica.so.3, instead of linking against the shared library. As a result, if the package containing libica.so.3 isn't installed, problems occur. Added a "Requires: libica3" to the spec file to fix this. (bsc#1142286) - Made a couple of changes to the spec file based on the output from spec-cleaner.- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch An Apache HTTP Server was set up with mod_ssl and the openssl ibmca engine using libica and a CEX6A card. Whenever a worker process is cleaned up a segmentation fault occurs. (bsc#1138517)- Upgraded to version 2.0.2 (Fate#325688) * openssl-ibmca 2.0.2 Fix doing rsa-me, altough rsa-crt would be possible.- Upgraded to version 2.0.1 (Fate#325688) * openssl-ibmca 2.0.1 Dont fail when a libica symbol cannot be resolved. - Made multiple changes to the spec file based on spec-cleaner output.- Upgraded to version 2.0.0 (Fate#325688) * openssl-ibmca 2.0.0 Add ECC support. Add check and distcheck make-targets. Project cleanup, code was broken into multiple files and coding style cleanup. Improvements to compat macros for openssl. Don't disable libica sw fallbacks. Fix dlclose logic. * openssl-ibmca 1.4.1 Fix structure size for aes-256-ecb/cbc/cfb/ofb Update man page Switch to ibmca.so filename to allow standalone use Switch off Libica fallback mode if available Make sure ibmca_init only runs once Provide simple macro for DEBUG_PRINTF possibility Cleanup and slight rework of function set_supported_meths - Did some cleanup to the spec file, based on spec-cleanup. - Removed the following obsolete patches: * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch- Added the following patches for bsc#1097463 * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch- Upgraded to version 1.4.0 * Re-license to Apache License v2.0 * Fix aes_gcm initialization. * Update man page. * Add macros for OpenSSL 0.9.8 compat. * Remove AC_FUNC_MALLOC from configure.ac * Add compat macro for OpenSSL 1.0.1e-fips. * Setting 'foreign' strictness for automake. * Add AES-GCM support. * Rework EVP_aes macros. * Remove dependency of old local OpenSSL headers. * Fix engine initialization to set function pointers only once. * Remove blank COPYING and NEWS files. * Remove INSTALL and move its content to README.md * Update README.md file to make use of markdown. * Rename README file to README.md to use markdown * Add CONTRIBUTING guidelines. * Adding coding style documentation. * Enable EVP_MD_FLAG_FIPS flag for SHA-*. * Initialize rsa_keygen in RSA_METHOD for openssl < 1.1.0 * Fix SHA512 EVP digest struct to use EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0 * Fix wrong parenthesis * convert libica loading to dlopen() and friends * Add support to DSO on new API of OpenSSL-1.1.0 - Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch - Added BuildRequires for autoconf, automake, and libtool. - Updated BuildRequires for libica-devel to be >= 3.1.1- Now that the openSSL engines directory is versioned: * Modified the spec file to query the libcrypto package for which directory to install the engine into. * Removed openssl-ibmca-fix-enginepath.patch. Replaced it with a sed command so that it will provide the correct versioned engines directory - Removed openssl-ibmca-configure.patch. It doesn't seem to be needed any longer.- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113) - Added libica-tools to the BuildRequires due to repackaging of libica. - Renamed BuildRequires from libica2-devel to libica-devel for the same reason. - Tweaked a comment to get rid of an rpmlint warning message.- fixed ssl configuration merging (bsc#1004463) - openssl-ibmca-fix-enginepath.patch: fix the engine path- Use macro for configure (fate#319941) - Use url for source - Enable parallel building - Cleanup spec file with spec-cleaner- Upgraded to version 1.3.0 (fate#319941) - Updated openssl-ibmca-configure.patch to apply cleanly - Removed obsolete patches - openssl-ibmca-README.patch - openssl-ibmca-sha256-digest-length.patch - openssl-pkey.patch - openssl-des-ede.patch - Did some spec file cleanup.- Fixed %post script to update library path (the only dynamic part of the ibmca configuration) every time the package is installed. (bsc#966139)- Updated AUTHORS, INSTALL, and README (bsc#942839) - %post and %postun added to properly update openssl.cnf (bsc#942839)- Updated to used libica2 == v2.4.2 for SLE12-SP1 (bsc#951138)- Remove dependency on fillup anf insserv; the package provides neither sysconfig file nor sysvinit script - Remove depreciated AUTHORS section - Use %configure macro - Add openssl-ibmca-configure.patch- the openssl engines moved to /%_lib/engines bnc#905480/bin/sh/bin/shs390zl33 1730359085 2.4.1-150600.6.6.22.4.1-150600.6.6.2ibmca.soibmca-provider.soopenssl-ibmcaChangeLogREADME.mdibmca-engine-opensslconfigibmca-provider-opensslconfigopenssl.cnf.sampleopenssl-ibmcaLICENSEibmca-provider.5.gzibmca.5.gzopenssl-ibmcaopenssl-ibmca.enginedef.cnfopenssl-ibmca.sectiondef.txt/usr/lib64/engines-3//usr/lib64/ossl-modules//usr/share/doc/packages//usr/share/doc/packages/openssl-ibmca//usr/share/licenses//usr/share/licenses/openssl-ibmca//usr/share/man/man5//usr/share//usr/share/openssl-ibmca/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:36287/SUSE_SLE-15-SP6_Update/ac1a6f05cb37628da0ddfb8732bdc2d4-openssl-ibmca.SUSE_SLE-15-SP6_Updatedrpmxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=75c509629e8611582c16ecf22fa0697c4fd51031, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3dd2e9053c0693ab0e34bfbfabc0c8679dcb6f3c, strippeddirectoryASCII textPerl script text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RR R RR R RRRRR R RR RRRRR R RR\mn5rR.-outf-8851faa581a6bdff117b9393d153a9e91ef3a7ecb3a0eef818761a5112a4375e3?7zXZ !t/ ]"k% .pBE9KLMOQʾ(H6H=6$nVǍ:="I-Rn (^%ś` /B.ŽSyxR'wm+`0~Zaɚ 헒hV*xq('fGwy僙;?3.Dv~'r8]a $v ?իeH1P :1{>R)2 d &#[#.Z+2YDGcJUzROh+}?=5oúc3e6`;TO]}A\Ni-7?Χt`"Ț+@Y#2f;dZRn cR`;Z}Lyhk,bU|pdpc$ m꩐@a   +S ugf so֥Y498ps\F_a7,,L)L1\ gAh7L!_o~=lHȴgi9x$VOcOg*7OwIىƫ H&_9=1V!!!shIgΠLE1Oa4`y5 wNdZ;&y0z. 1xI= H6-2`1dGhX+̊2n?]Eầ.^Zɬ&eƠ{-*q2Sι&KAe&[QTCH޶[iI;&F<:S]{5[C_r3<| ]2â=\M,0N|mM3ӻ876|snwYYg֚V;4@'a8M[,lOBZ/\sS*WpmŀmA>}*rh_V̑;>bEXmsӏBpj+~?YN|Y-_jBv[axIڋ0Y@W훚nچ"ʚM4 ȑOr:xguw I D  '䠉*'1JY4s T}iWK<^ZbooHݟ-;4#)bŪʩpP`u,3#D)P1P2$>S\:3Z i\|׮gW[gZ0P.M.:w6xJ}Ngtjzݣ;nn,eFDHhyP8n4˿K9mzGoePpb:7?o,0 Y4W`wuz -NqMX&#L}Ap^@+&4п9ӂ.%pOV CdAIG9']FƠ OD%F+ u5f[%hܺN8ngzQRE{@rdܒգ\b7ڮ-=)@¯lc< Awaw rJ4,6xux,F.AywJ[\rY30clpb֕ҕe@\yK#? > IFM.lFKڋ9:KTZUJ;ЫyG/1sO ^@Q E%l! TFw<|ϐᒈFE Ş.Kl^ T RIT cOYyEW6KXri>LƤܓ]mBsl"fI^h`袵d $p}?mAċ$,[NatD9KΗ6`:ǰkeX VJqo'$Ôv}l=F[lB]Mzvb@-, M)/ JޢjCcaa ֑@+~2/35W֜{]廵DcuN@`ElIP\z%UbHDBA߉{J{gFq}G ٝą+2%ג8"PM ҇F 0CE?0f#dLreYbJ@+; +MqkLۦXorQAQoCB_Q[R 8iCz9=#x0hE)e{ pFaa8 Ei>1b*+(9k8ݼ5 CѴh4tؑ'ӎôٻ;BCNLⰟ)w$ZU4x2@ BP2P?;Ǎ&iǿlPx9(=9:(f$vv`gR#I rh!L&66%7mep1w@*y@)r>a/e8׿7V՟袌vM31s0X/b?#LsrZ"͙{ܸ@ D:=j,~tLKj/}IXٰx1D5H0ʠ}x}+Xc?Qm|f>Y#~Ժvc| P@vxKF&qt)gMڝWP r>.KI #JNU_{$1CZg+h =h݅/r7,[<eM%{, x-n#g(f l"5hV uOX\MIYBrw E!bW=ƾ[M5 |P$Da LO-O vf]B,c<? Uw  ̋B[2=ɏAY,LED: d`wC;YHq\`ױ "ٍ8>`Z8Bh.UF4QX>B,HOEӴFx\bٛ<1Y]L̃DZ3m\%umL c?MP"n;"vwi#/?<P9Yo<cZĿ ]٫WBVbhuN'Y$ `%.Fr pF/},V3/TuT vsIY;w4|UJs+Ԧ1pHז_0j-Q[S:4%9VZ%_\;6 ?#;9xtYJWnf})^*r;@h )lu~v:U)Nx.B'0ѻ-vm'rRS{.̂"O H7w]va YZ